
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier: HtDodi4+vz4+YyFLHRKCl9ybp1R/rFKtWl5AT1PubF4=
Subject key identifier: BC:EC:B6:A9:78:07:37:E1:9C:19:70:EB:66:29:1A:A9:BE:23:A5:49
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number: 02DD
Signing time: Thu 21 May 2026 01:24:42 +0000
Manifest this update: Thu 21 May 2026 01:24:41 +0000
Manifest next update: Thu 28 May 2026 01:24:41 +0000
Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: C7qv173qASo31Ao/LEVUaKv6wXBNs1a5HLWOEWAa7tM=)
2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: UPDUd4t5zx8UFYbNLzFGnvRhyMjEHl7Tb9rUHZFXp40=)
3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 7/ANmUusyhHaIQ0U3dh4piILL1EQvQjyTLSsoXWQ5XU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: May 21 01:24:41 2026 GMT
Not After : May 28 01:24:41 2026 GMT
Subject: CN=6a0e5eda-f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:d3:30:48:0a:18:72:49:14:24:e7:d3:ef:
6c:e4:d6:f9:47:73:31:9a:2c:2f:79:b6:92:19:54:
3e:f7:84:88:98:82:da:8d:b2:5f:34:56:67:46:6b:
38:4d:24:6b:23:fb:eb:86:42:4f:a4:51:a5:db:a4:
46:28:80:91:32:7c:b1:74:f8:d4:8e:94:c3:c9:f3:
37:9f:ad:b9:61:7a:3a:ba:a0:58:05:5e:4a:5e:47:
6b:44:16:c2:47:41:45:41:e2:23:2b:49:c6:0e:c7:
8d:d9:8b:d0:2d:0c:32:fa:28:a5:7d:e4:a0:10:14:
b0:1f:49:d8:b5:e0:20:86:5f:67:57:80:9e:28:fd:
6b:51:e3:b6:eb:c7:34:08:a4:ab:7f:ba:15:c6:7d:
38:25:27:35:ae:3a:81:95:02:85:03:cc:74:4d:f9:
bc:9d:cf:7a:df:e4:57:3c:29:dd:e9:d1:6d:ce:de:
53:4e:b5:40:69:75:66:09:49:2a:3a:a2:47:e7:ac:
c7:71:2e:ae:d0:5f:38:61:d2:ee:d0:fd:59:dc:84:
9d:98:f5:17:39:6d:f1:d7:27:f1:79:fc:5f:00:1a:
a7:c2:35:d9:ca:58:04:6c:dd:67:9e:15:68:39:da:
b0:b2:8c:1d:92:6a:d8:3d:a4:df:bd:f1:93:22:e2:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:B6:A9:78:07:37:E1:9C:19:70:EB:66:29:1A:A9:BE:23:A5:49
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:d6:0e:de:7a:3a:00:94:b0:5c:a0:ef:58:22:82:22:a9:
e1:ec:e0:27:af:9f:87:e7:5d:17:29:15:9c:5a:e1:8c:dd:44:
87:5d:e1:ac:3f:4c:6d:ec:47:8e:5c:60:e4:c6:b7:d1:85:f8:
d5:a6:c0:af:43:ec:7b:ad:ad:81:b5:b1:8c:39:58:98:8b:d3:
cc:8c:80:a9:be:7b:c5:e6:9b:67:87:fc:15:b1:6a:41:d7:22:
00:75:c7:38:3f:84:7a:96:83:9f:ba:4e:52:af:a4:43:a1:5c:
2c:f8:1f:5e:df:19:ea:33:c7:31:0f:07:7e:29:69:db:48:5d:
40:18:dd:e5:25:e8:86:bb:01:e8:bd:b7:16:ed:cf:9b:48:aa:
a4:c1:f4:7c:7b:6d:18:64:68:f9:33:78:43:7c:61:94:f4:c4:
87:0a:09:4e:5e:1c:4b:ed:16:0d:30:92:4d:69:eb:f5:cb:d5:
5b:cb:26:34:18:91:9a:04:6d:93:44:12:9d:3f:89:90:99:40:
34:dd:68:42:86:bf:5f:94:fc:65:6c:ff:5b:3b:c6:44:82:ee:
59:b4:b6:35:04:33:a8:c2:81:37:9d:51:3a:9b:9f:ed:4e:06:
3f:82:5f:fe:2d:eb:7e:3d:5e:dc:24:1e:ce:43:19:1f:7c:c5:
63:28:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:29 2026 by rpki-client